REMARKS 



Applicant wishes to thank Examiner Bonzo for having indica- 
ted that claim 84 is "objected to while containing allowable sub- 
ject matter." The Examiner does not indicate, however, what ac- 
tion the Applicant should take to obtain allowance. 

The Applicant speculates that the claim might be allowed if 
rewritten in independent form, including all the limitations of 
the sole parent claim. This has been done, and allowance of 
claim 84 as amended is therefore respectfully requested. 

Applicant also thanks the Examiner for having conceded that 
the previous rejections were inapposite to Applicant's claims as 
amended, and for having withdrawn the previous rejections based 
on Rasmussen. 



Concordance of references to claims 

In view of the nonlinear or nonsequential presentation of 
claims — in the claim sequence itself and the Official Action, 
and therefore in this document — it may be helpful to have the 
following listing that shows very roughly the pages where reason- 
ing can be found as to each of the claims in this case. Because 
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all the claims are included in the summary at page 2 of the Offi- 
cial Action , the page 2 summary is omitted from this listing: 
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Status of claim 62 



It is suggested in the Official Action that claim 62 is no 
longer pending in this application (see the Office Action Sum- 
mary, at "Disposition of Claims" — block 4) . In the July 2005 
Action, however, claim 62 was acknowledged as pending — and in 
the present Action argument is presented for its rejection (see 
bridging pages 12 and 13) . 

Applicant did not cancel or amend claim 62 in either of the 
intervening two October 2005 responses. It appears amended on 
page 20 of the October 12 response — and still standing on page 
17 of the October 26 supplemental response. 

The Applicant therefore believes that claim 62 continues in 
force. It is again amended in the present paper. Reasons for 
allowance are taken up below in due course, as particularly in 
the listing at pages 41 and 42. 



Rejections based upon Section 112 

§ 112 first paragraph — In the Official Action it is indicated 
that claim 79 contains subject matter not found in the original 
specification as filed. The Action asserts (emphasis added) : 

"At [no] point in the specification is it ever discussed 
whether the claimed invention is a circuit breaker. 
This claim is believed to be a result of a conversation 
with Applicant , and as such was not held by Applicant 
at the time of the filing . . . ." 

The Applicant respectfully traverses. The Applicant agrees 
that the limitation was introduced by the Examiner in a telephone 
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interview — which in turn was placed on record by the memoriali- 
zation of that interview that appears in the October 12, 2005 
Amendment (bottom of page 27 in that paper) . 

Thus the subject limitation ("the apparatus is not a circuit 
breaker") has the same status as any other item of prior art ci- 
ted by the Examiner. From the entire specification as originally 
deposited it is inherent , and very plain, that the Applicant's 
invention is not a circuit breaker. 

Since the invention is inherently and plainly not a circuit 
breaker, and the Applicant obviously did know that at the outset, 
the Applicant is entitled to direct claims to this feature of the 
invention. Withdrawal of this rejection is therefore requested. 

§ 112 second paragraph — In the Official Action it is further 
said that sixteen claims are indefinite because (emphasis added) : 

"the Examiner is unable to determine the bounds of 
* substantially exclusively made up of substantially 
commercial, off-the-shelf components.' . . . Applicant 
responses to this rejection previously reaffirm the 
Examiner' s inability to precisely define metes and 
bounds . . . . " 

For the following three reasons, the Applicant respectfully tra- 
verses. The claims are 2, 3, 7, 12, 19, 24, 41, 54, 61, and 64 
through 69. 

Questioned word not present — First, the statement in the Offi- 
cial Action is factually in error. The underscored word "sub- 
stantially" (which is the second occurrence of that word in the 
quotation above) does not appear in any of the subject claims. 

At least one of the cited claims (namely claim 3) appears 
never to have recited even one occurrence of "substantially" ; and 
one of these claims (claim 27) actually has been canceled (please 
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see pages 2 and 9 of the October 12 Amendment, and page 8 of the 
October 27 Amendment. 

Other occurrence not a concern — Second, in the telephone inter- 
views the Examiner specifically indicated that he was not partic- 
ularly troubled by the first occurrence of that word. (That 
occurrence affects only the quantitative measure of the basic and 
very straightforward limitation " exclusively made of [COTS] 
components".) Rather, he said, his concern was for the second 
occurrence, which operates in the realm of what the Examiner said 
he regarded as an inadequately-defined concept — "commercial, 
off-the-shelf". 

Review of the correspondence will confirm the Examiner's 
concern for this second part of the overall limitation. He re- 
peatedly expressed uncertainty how to deal with different kinds 
of modification, e. g. "overclocked" components. 

While the Applicant expressly disagrees with this character- 
ization by the Examiner (i. e. , inadequately defined), the Ap- 
plicant removed the term without prejudice — in the October 12 
Amendment. Accordingly the Applicant has followed the Examiner's 
express suggestions for obtaining allowance of the fourteen re- 
vised claims (out of the sixteen cited ones) . 

The Applicant believes that these claims are in condition 
for allowance. Therefore the Applicant respectfully asks that 
the rejection of these claims be withdrawn. 

Applicant has not "reaffirmed" — Third, the Applicant cannot 
understand the above-quoted statement in the Action: "Applicant 
responses . . . previously reaffirm the Examiner' s inability to 
precisely define metes and bounds." For the record, Applicant of 
course understands that the Examiner takes that position; how- 
ever, the Applicant has expressly and consistently presented 
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* 



principled reasoning in support of both occurrences of the word 
"substantially". See, e. g. , the October 12 Amendment in the 
passage bridging pages 24 and 25. 

More extended analyses leading to the same conclusion can be 
seen in the Applicant's earlier responses. Hence it is believed 
that the Applicant has never expressly or implicitly "reaffirmed" 
— or affirmed even once — the Examiner' s inability to precisely 
define metes and bounds of the claims. 

§112 fourth paragraph — In the Official Action it is further 
said that eight claims "fail to further limit the scope of the 
claims." For the four reasons set forth below, the Applicant 
respectfully traverses. The claims are 4, 16, 36, 47, 59, 63, 66 
and 82. 

Express definition — First, in the Official Action it is asser- 
ted that (italics in original, underscoring added) : 

"The such computer system of these claims [in] each case 
has already been claimed verbatim in the parent claim. 
These claims recite a "such computer". 

With respect, this assertion is factually in error. 

As extensively explained in earlier papers, as well as in 
the telephone interviews, the Applicant's definition of the word 
"such" in the original specification expressly makes the computer 
system not an element of the claimed combination of the parent 
claims. (Please refer to the Specification at page 7, lines 8 
through 16 — and also to the October 12 Amendment at page 26, 
line 6, through page 27 at midpage.) 

This explicit hardware definition overrides and controls any 
interpretation based upon the relatively more-abstract concept of 
"failure". (See discussion below.) 
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The computer system thus is rather only a part of the envi- 
ronment, or operating context, of the claimed combination- The 
Applicant submits that this reason alone is sufficient to negate 
the current rejection. 

System "failure" goes along with the system — Second, in this re- 
gard the Action now focuses upon the term "failure" in the phrase 
" failure of a computer system" — in the preambles of the parent 
claims. In the Official Action it is argued that existence of 
the concept of "failure" as a part of the hardware circuits (see, 
e. g. , claim 1 at lines 7 and 8) forces the reader to recognize 
the computer system as a part of the combination claimed in the 
parent claim. 

In previous Official Actions a corresponding rejection was 
lodged against the term "computer system". In response it was 
explained by Applicant that the use of Applicant' s claim word 
"such" — defined explicitly in the specification, as noted above 
— expressly excluded the "system" from being a part of the 
parent-claim combination. It was further explained that the 
system becomes part of the combination only in the later depen- 
dent claims . 

Now the Official Action shifts the focus to the "failure", 
saying (emphasis added) : 

"As the failure is recited in the body of the claim, 
. . . the Examiner is then required to find the com- 
puter svs tern " . 

The Applicant respectfully protests that the "failure" is not a 
mechanical element but only a possibly occurring conceptual at- 
tribute of the system. 

The whole purpose of the special usage of "such" is to de- 
fine clearly in advance whether a competitor who makes, uses or 
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sells apparatus that includes no computing system is an infrin- 
ger. This rationale is meaningless for a competitor who makes , 
uses or sells apparatus that includes no "failure". Yet the ar- 
gument in the Official Action elevates this conceptual attribute 
to the status of a mechanical limitation. 

The Applicant further submits that the "failure" simply goes 
along with the "computer system" — so that if that system is not 
an element of the claimed combination, in the parent claim, then 
neither is its possible "failure". It will now be seen that the 
argument set forth in the Official Action mires the discussion of 
this simple and straightforward matter in a semantic and existen- 
tial bog. 

That is, the claims state plainly that the computer system 
(along with, necessarily, its possible failure) is not an element 
of the parent-claim combination — but is an element of the de- 
pendent claim. This relationship is extremely straightforward. 

The Applicant respectfully submits that the Official Action 
undertakes to complicate this simple relationship unreasonably. 
Worse, the Action does not suggest any acceptable alternative 
wording that would be acceptable to the Examiner, for eliminating 
this entirely semantic roadblock. 

Amendment — Third, yet once again in the interest of moving 
this case along toward issue, the Applicant has nevertheless 
amended the parent claims (and a number of other claims, for a 
reasonable degree of consistency and uniformity) to recite even 
more explicitly " such failure". With these revisions, the 
possible failure itself, as well as the system, is seen to be not 
an element of the claimed combination of the parent. 

Rather, for the purposes of the parent claims (only) , the 
possible failure expressly is merely a part of the recited con- 
text or environment of the invention; hence it is no longer true, 
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if it ever was, that "the Examiner is then required to find the 
computer system". Given these revisions, Applicant once again 
asks that these simple dependent claims, straightforwardly adding 
the computer system into the claimed combination, be allowed. 

Dramatic change in claimed scope — Fourth and finally, although 
it has been repeatedly said in the Official Actions that eight 
claims "fail to further limit" the parent claims, actually all 
but one of the eight (claims 16, 36, 47, 59, 63, 66 and 82) go 
well beyond "further limiting" — to almost reverse the parent- 
claim recitation. In this regard, all the parent claims of these 
enumerated seven dependent claims recite (emphasis added) : 

"the network is constructed to be initially and perma- 
nently distinct from such computing system " . 

While those seven parent claims expressly exclude the pro- 
tected system from the network, the corresponding seven dependent 
claims expressly include the protected system in the apparatus . 
These recitations are entirely consistent, since the "network" is 
a subset of the claimed "apparatus". 

Nevertheless, two distinctly different pictures of what is 
being claimed emerge from the parent claims and their dependent 
claims, respectively. Although the two pictures are not quite 
opposites, the "further limiting" of the parent claims is actu- 
ally very dramatic. Please see, in this regard, the discussion 
of claim 4 below at pages 35 and 36. 
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Rejections based upon Section 102 

In the Official Action it is further said that twenty-eight 
claims are anticipated by the patent to David W. Best et al. The 
claims are (including dependents) 1, 4 through 9, 11, 13 through 
17, 19 through 21, 42 through 45, 47, 48, 53 , 54, 63, 70, 76, 77 
and 79 . For the reasons detailed below, the Applicant respect- 
fully traverses . 

Claims 1, 4 through 9, and 79 — Claim 1, and hence all of its 
dependent claims including those listed here, recite (emphasis 
added) : 

"a hardware network of components, having substantially 
no software . . . . " 

In the Official Action it is proposed that Best answers to this 
recitation, and particularly that he discloses (emphasis added) : 

"a hardware network of components, having substantially 
no software , . . (Figures 3, 4 and 5 [of Best] dis- 
close a hardware network . . . ) " . 

With respect, that statement is factually in error. Really Best 
discloses a software-driven system , as is clear from e. g. column 
3, lines 61 through 63 (emphasis added) : 

"In the system of Fig. 1, the global buses are 
dynamically grouped under software control to form re- 
dundant communication channels . " 

He makes this same point crystal clear in at least these six 
other places : 

column 3, lines 19 through 20, 
column 4, lines 55 through 66, 
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column 5, lines 18 through 25, 
and 54 through 59, 

column 6, lines 17 through 19, 

and also on the patent coversheet — in his Abstract, at lines 10 
through 17 . 

Therefore it is incorrect to call Best a "hardware network" 
as claimed, with "no software". Claim 1 cannot read on Best, and 
Applicant respectfully asks that this rejection be withdrawn. 

Claim 4 — In addition to the no-software limitation dis- 
cussed above, this claim also states that the apparatus comprises 
the protected computing system. Whereas it is asserted in the 
Official Action (page 5) that Best teaches an apparatus compris- 
ing the protected system, the Applicant for three reasons re- 
spectfully traverses : 

Best lacks enablement — First, that assertion in the Action is 
without meaningful basis in the Best disclosure. Best may possi- 
bly imply vaguely that computing capacities exist wherever Best' s 
buses may lead — but he neither teaches nor presents any signif- 
icant information about the associated computer or computers . 

Therefore the Applicant respectfully submits that Best fails 
to provide enabling disclosure of a computing system that is part 
of a failure-deterring apparatus — such as recited in e. g. 
claims 4 and 16. Enabling disclosure is a requirement for use of 
a reference to reject a claim. 

Office Action is ambivalent — Second, to the extent that Best 
provides any facts at all, it appears that such vaguely implied 
computing facilities are remote from, not any part of, Best's 
illustrated circuits. In fact, in the Official Action itself , at 
bottom of page 10, it is directly stated: 
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" the computer disclosed as running the applications [is] 
not part of the protection system but [is] at the other 
end of a bus " . 

Thus, with respect, the Official Action takes two diametrically 
inconsistent positions: 

■ at page 10, for purposes of rejecting claim 42 etc. under 

§ 102, Best's protected computing system is called not part 
of the claimed apparatus ; but 

■ at page 5 of the Action, for purposes of rejecting e. g. , 
claim 4 under § 102 , the protected computing system instead 
is part of that apparatus . 

Resolution of inconsistency — Third, in the Official Action at 
page 10, the Commissioner has gone on record as taking the former 
position (the protected system is not part of the claimed appara- 
tus) . The Applicant submits that is this position which is the 
correct one, because of Best's above-mentioned failure to provide 
any enabling disclosure of a computing system. 

This position is favorable to claim 4 under § 102 . The Ap- 
plicant therefore requests withdrawal of this rejection too. 

The foregoing "comprises the protected computing system" 
analysis applies not only to claim 4 but also to claims 16, 36, 
47, 59, 63, 66 and 82. Therefore the Applicant also respectfully 
asks that all these claims be allowed. 

Claim 6 — In addition to the no-software limitation dis- 
cussed above, this claim recites (emphasis added) : 

"the circuits are not capable of running any appli- 
cation program . " 
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In the Official Action it is said Best answers to this recita- 
tion. Specifically, the Action argues, Best's (emphasis added): 

"circuits are not operable [sic, capable ] of running an 
application program (column 6 lines 28-45: no applica- 
tion programs are disclosed and the logic elements are 
simple comparators and voters which [sic, "without"?] 
the ability to carry out application execution) . " 

With greatest respect, these statements too are factually in er- 
ror. The argument in the Official Action fails to take into ac- 
count the whole system described by Best. Best does not have on- 
ly hardware — his dead hardware alone could do nothing at all . 

He points out over and over that his hardware relies upon 
controlling software to work, and his drawings refer to a "host 
processor" that of course runs applications programs. This con- 
clusion is irrefutable, as Best repeats those key facts in at 
least all these six other places — already listed earlier: 

column 3, lines 19 through 20, 

column 4, lines 55 through 66, 

column 5, lines 18 through 25, 
and 54 through 59, 

column 6, lines 17 through 19, 

and even on the coversheet — in his Abstract, at lines 10 
through 17 . 

Therefore it is clear that Best has an associated computer, 
running software — but he does not offer details about that com- 
puter; therefore there is no enablement as to the Applicant's 
claimed guarding of an "entire system", or as to the Applicant's 
claimed use of "all COTS" construction. 

The Best device, in short, is a only hardware appendage to 
the "host computer" or "controlling computer" (column 4, line 56) 
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whose software controls the functioning of Best. The hardware 
is useless without the host. 

At the very least, Best thus fails to satisfy the recitation 
of Claim 6. The Applicant's infrastructure, in contrast to Best, 
is wholly self sufficient. 

Please note that this analysis applies as well to claims 38 , 
45, 48 , 57, 67 , 70, 71, 76, and 81 through 83 . Therefore the 
Applicant respectfully asks that the rejections of those claims, 
too , be wi thdrawn . 

Some of these claims (claims 38, 48 and 70) have now been 
amended to even more clearly emphasize that the claim refers not 
merely to the circuits considered alone. (The amendment is 
particularly justified since the subject matter has been placed 
on the record by the Official Action passage last quoted above.) 

Again, although Best makes clear that there is a host pro- 
cessor (or "computer") and that it is absolutely necessary to op- 
erate the hardware, he nevertheless fails to provide enabling 
disclosure about any details of the computer. Therefore he does 
not enablingly disclose that e. g. he protects the "entire" 
computing system, or that the computing system is substantially 
all-COTS. 

Claim 9 — In addition to the no-software limitation of claim 
1, this claim recites that (emphasis added) "the parallel chan- 
nels of such computing system are of diverse design or origin . " 
In the Action, in this regard, it is said (emphasis added) : 

"the parallel channels of [Best's] computing system 
are of diverse design or origin (column 3, [line] 5: 
the channels are attached to different computer systems 
and thus are generated at a diverse origin) . " 

Applicant respectfully traverses. The specification makes 
entirely clear that "origin" means "who made it". 
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The Official Action attempts to dilute the claim language — 
from channels that "are of" diverse design or origin, to channels 
that "are generated at " a diverse origin." This is very plainly 
not the gravamen of the claim language. The point is not the or- 
igin of the signals , but rather the origin of the equipment and 
its operation , i. e. , the channels themselves — exactly as 
recited. 

In the original specification it is expressly indicated (em- 
phasis added) : 

■ at page 19, lines 3 through 6 — that the claim recitation 
refers to subsystems that are diverse " architecturally and 
even commercially " ; 

■ at page 30, lines 9 and 10 — that the limitation calls even 
more explicitly for "independently designed hardware and 
software" ; 

■ at page 31, lines 4 and 5 — the idea is "diverse hardware 
designs for the S3—, and D-nodes in order to provide 
protection against . . . hardware design faults"; and 

■ at page 52, line 18, through page 53 line 3 — that "even 
more important is . . . processor diversity"; 

and with like points reinforced at: 

■ page 54, line 5, 

■ page 55, line 16, 

■ page 56, lines 17 and 18, and 

■ page 57, also at lines 17 and 18. 

Thus, again, the term "origin" means "who made it". This 
has now been made even more emphatically clear by substituting — 
in some of the claims — the term "manufacture" for "origin". 
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(In others of the claims, particularly recognizing the 
above-cited passage at page 52, the words "and origin" have been 
simply omitted. Many processor models that are very highly di- 
verse are produced by e. g. the Intel Corporation.) 

The same conclusion as to diversity of design or origin is 
applicable to claims 21, 37 and 43 . The Applicant therefore asks 
that these rejections, too, be withdrawn. 

Claim 79 — In the Official Action it is further said that 
Best's "Fig. 3 does not incorporate a circuit breaker". The Ap- 
plicant respectfully traverses, for three reasons: 

Claim limitation misread — First, here again the Official 
Action attempts to dilute the recited limitation — from "the 
apparatus is not a circuit breaker", as claimed (and as proposed 
by the Examiner himself in the telephone interviews) , to the far- 
less-definitive " Fig. 3 does not incorporate a circuit breaker". 

Present invention inherently not a circuit breaker — Second, the Ap- 
plicant' s specification inherently, by the overall character of 
the disclosed invention, makes very clear and definite that the 
Applicant's apparatus is not a circuit breaker. If it were a 
circuit breaker it would not be able to perform its fundamental 
intended purpose of guarding the computing system against failure 
— i. e. of keeping the computing system going. Objectives of a 
circuit breaker paramountly include shutdown, and thus are anti- 
thetical to keeping the system going. 

No definite negative teaching in the art — Third, to the extent 
that the Official Action phrase "incorporate a circuit breaker" 
carries any meaning at all in this context, then Applicant re- 
spectfully submits that recitation of a negative limitation can- 
not be met by the mere absence of a teaching one way or another . 
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A greater burden than that must be borne, namely a definite 
teaching — either inherent (as in the present invention) or 
express . 

Best' s disclosure leaves open the possibility that his cir- 
cuit actually does, in the words of the Official Action, "incor- 
porate a circuit breaker". Best's system lacks a fundamental aim 
to maintain operation of the whole system if at all possible — 
and therefore could well "incorporate a circuit breaker" . Hence 
even as interpreted in the Official Action, Best cannot satisfy 
the limitation. 

Claims 13 through 17, and 19 through 21 — Claim 13, and all of 
its dependent claims including those listed here, recite (empha- 
sis added) : 

"Apparatus for deterring failure of an entire 
computing system . . . comprising: . . . 

"circuits of the network for operating programs to 
guard such entire system from such failure." 

In the Official Action it is said that Best teaches just 
such apparatus, but that assertion is without justification. 
Best' s patent neither shows nor states that he aims to protect an 
entire computing system from failure. 

To the contrary, his invention is expressly for "management, 
comparison, and correction of redundant digital data" (column 1, 
lines 2 through 11). What happens to Best's compared, corrected 
data after it passes beyond the "global . . . interfaces" of his 
Fig. 1 — or the "host processor data bus" of Fig. 3 — is no 
concern of Best or his invention. 

He adds at column 2 , bottom three lines : "The present 
invention is a system for controlling and managing redundant 
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inter-processor communication channels." Such channels very ob- 
viously are much less than "an entire computing system". 

The Official Action virtually acknowledges this, in speaking 
of (emphasis added) : "the plural data channels coming off of the 
redundant processors inherent to the computer not shown " . The 
Applicant therefore respectfully asks that these rejections, too, 
be withdrawn . 

The foregoing "entire computing system" analysis applies al- 
so to claims : 

13 through 24, 
34 

42 through 49, 
58, 

62 through 64, 

68, 

72, 

76, and 
77. 

Therefore the Applicant also respectfully asks that all these 
claims be allowed. 

Claim 15 — In addition to the above-discussed recitation of 
protecting an " entire computing system", this claim recites also 
that "the network is an infrastructure". It is said in the Offi- 
cial Action that Best teaches such a network. 

Applicant respectfully traverses, because Best' s system is 
not an infrastructure at all. It is simply peer level circuitry 
that controls and manages communication channels (column 1, lines 
1 through 11; and column 2, lines 66 through 69). In fact Best's 
circuitry is effectively part of the communication channels them- 
selves . 
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(This discussion of "infrastructure" is applicable to other 
claims as well, particularly claim 81 — inasmuch as neither Best 
nor Avizienis 1985 truly describes or teaches an infrastructure. 
The Applicant therefore respectfully requests withdrawal of the 
rejections of both these claims.) 

Claim 19 — - This claim recites (once again in addition to the 
"entire system" recitations of claim 13) that the apparatus is 
for use with "a computing system that is substantially exclusive- 
ly made of [C0TS1 components " (emphasis added) . In the Official 
Action it is said that Best discloses such apparatus. 

The Applicant traverses, because Best shows no definite com- 
puter — so that the statement in the Action appears to be purely 
speculative. With greatest respect, it appears to arise entirely 
from hindsight after seeing the Applicant's claim. 

Since Best shows no computer (but only says that there is 
one) , he is not enabling. He fails to teach enough about any 
computer to convey whether the putatively included computer is 
COTS, or exclusively COTS, or substantially exclusively COTS — 
or 100% custom manufactured. 

Other claims that include similar recitations are claims 7 , 
33 and 65 (the two last-mentioned being rejected under § 103) . 
The Applicant accordingly asks that the rejections of all these 
four claims, as well as their dependent claims, be withdrawn. 

Claims 42 through 44, and 46 through 49 — At the outset Applicant 
notes that claim 42 is subject to the same "entire system" analy- 
sis as claim 13 (see page 41 above) . It is therefore believed to 
be allowable for the reasons set forth there. 
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In addition, in rejecting claim 42 it is said in the Offi- 
cial Action that Best does have a computer, and specifically that 
(emphasis added) : 

"the computer disclosed as running the applications [is] 
not part of the protection system, but [is] at the 
other end of a bus " . 

The Applicant agrees that Best vaguely mentions both a local -host 
processor and a remotely attached communications processor; how- 
ever, Applicant respectfully traverses because Best has not ena- 
blingly "disclosed" specific details of any computer. 

In particular he does not enablingly disclose that there is, 
as claimed in claim 42, any (emphasis added) : 

" entire computing system that is [guarded] from failure" 

and that is — 

" distinct from the apparatus and that has plural gener- 
ally parallel computing channels and at least one 
processor for running an application program " . 

Among many other possibilities, Best might connect to multiple 
separate computing facilities on different continents, each with 
just one communication channel, etc. — on which these "entire 
system" claims do not read. 

Best cannot deter failure of an entire such system. Absent 
such enabling disclosure, therefore the Applicant respectfully 
asks that the rejection of claims 42 through 49 be withdrawn. 

Even more specific is dependent claim 49, which specifies 
that the way in which the apparatus guards against failure of the 
entire computing system is by responding to error signals from 
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that system. No cited reference does that. Claim 49 is taken up 
in connection with § 103 rejections, at page 56 below. 

Claim 45 has been omitted from the detailed remarks in the 
Official Action , although it is said elsewhere in the Action 
(summaries at pages 2 and 5) that claim 45 is rejected under 
§ 102. As mentioned above, the rejection of claim 45 is believed 
to be inapposite based upon the "no application program" analysis 
set forth in connection with claim 6 (see pages 36 and 37) . 

In addition, claim 45 is also believed to be patentable 
based upon the discussions of claims 42 ff . immediately above and 
at page 42. 



Rejections based upon Section 103 

In the Official Action it is said that thirty-eight claims 
(listed at page 14) are unpatentable for obviousness over Best in 
view of the Avizienis 1985 publication. The Applicant wishes to 
thank the Examiner for the respect and recognition given to the 
Applicant's earlier work. 

It is true that the Applicant has devoted much of his long, 
fruitful academic career in the computing field — now emeritus 
from UCLA — to the noble cause of fault-tolerance and reliabil- 
ity. Yet for the five broad reasons set forth below the Appli- 
cant necessarily traverses . 

unobviousness over the art — First, the Applicant's paper ap- 
peared twenty-one years ago, and the Best patent issued fifteen 
years ago. The two documents have coexisted for more than fif- 
teen years , to the present. It was more than ten years even 
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counting to the filing of the Applicant's provisional application 
on which the present case is based. 

Passage of time — During that time, generations of brilliant 
computer-science majors have flowed through campuses and into the 
worldwide ranks of industry and academia alike. All have been 
exposed, at least as we are required to presume , to the two docu- 
ments that have been cited in this case. 

Most of those people are well above the required legal stan- 
dard of "ordinary skill" for testing obviousness under the Patent 
Statute. Nevertheless, as far as we know from the record in this 
case, or otherwise, none of them has published or patented the 
invention claimed in this application. 

In many fields, fields that move slowly, ten or fifteen 
years pass in only the blink of an eye and without occurrences of 
note — but in the computer field ten or fifteen years is an 
entire era. Thus a reader may search through the two cited ref- 
erences in vain for any mention of Windows®, or the Worldwide 
Web, or the Pentium chip, or the Blackberry. 

Strongly felt need — While all these marvelous innovations 
have come racing forth, and during all that "era", there has 
always been an enormous NEED for more reliable and "robust" 
computing. Indeed the unreliability of the Windows operating 
system is one of the most striking and astonishing facts of the 
modern world — known to everyone from the hallowed halls of 
Caltech and MIT to schoolgirls in the back-country of rural 
China . 

Thus it is hardly for lack of need , or lack of recognized 
need, either, that the two cited references have not been previ- 
ously combined by people of ordinary skill in this field — or, 



Examiner B. P. Bonzo / 09/886,959 



46 



P. Lippman / xAAA-02 



for that matter, by people (other than the present Applicant) at 
any skill level. There must be some other reason. 

Court approval of reasoning — The high Courts have found exactly 
such an analysis to be persuasive of unobviousness. The Appli- 
cant respectfully submits that these commonly known facts are 
dispositive of unobviousness and of patentability, over the 
combination of references cited in this case — and also over the 
combination of any references having a like tenure, together, in 
the eye of the relevant public. 

Peer admiration for the invention — There are still more indicia 
of unobviousness here. As the Examiner is aware, in 2000 the 
subject matter of the present patent application was presented as 
a technical paper, in the world's most prestigious and advanced 
conference on dependable computing — the Dependable Systems and 
Networks Conference in New York. 

As a result of that publication, several well-recognized 
high-level computer scientists took the trouble to contact the 
Applicant with congratulations and commendatory comments — say- 
ing, generally, that this subject matter is really a good idea 
and a remarkable, pioneering advance. This alone is strong evi- 
dence that to people whose skill is not merely ordinary but even 
highly extra ordinary , the invention is not at all obvious. 

Furthermore the Applicant, Dr. Avizienis, has been invited 
to present a one-hour keynote address, on the invention of this 
application — at The World Computer Congress. That is the 
world's premier conference on computer science and engineering 
and its applications. It is held every two years, most recently 
in Toulouse, Montreal and Beijing. The 2006 WCC will be in San- 
tiago, Chile in August. 

To be invited (all expenses paid) to give such an address is 
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considered one of the highest international recognitions in in- 
formation processing. The WCC is organized by the International 
Federation for Information Processing, which includes over fifty 
of the world's most advanced countries. 

Yet this is the selfsame invention which the Official 
Actions in this case have denigrated, for four years now, as 
"obvious" . 

With respect, the foregoing discussion would appear suffi- 
cient to overcome all the rejections stated in pages 14 through 
50 of the Official Action. The Applicant therefore asks that all 
those rejections be withdrawn. 

References not combinable — Second, the Applicant nevertheless 
also wishes to point out that the teachings of the two references 
fail to be fundamentally compatible for purposes of combination. 
It is well understood that cited references need not be lined up 
one-for-one, enabling one machine to perfectly dovetail with and 
fit seamlessly into the other; however , as a practical matter 
some elementary level of compatibility is a requisite. 

Without this much, it can never occur to the person of ordi- 
nary skill (not a very high level of skill, as is generally 
agreed) to combine their respective features. Thus combination 
of these two references is implausible: 

■ Best is a very narrow, mechanistic, practical-minded, simple 
software-controlled operational , commercial , hardware-voting 
product that solves a very limited operational problem ; 
whereas 

■ Avizienis ('85) is a very broad, conceptually lofty theoret- 
ical presentation of a software operating system built to 
conduct an academic experiment . 
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The part of the Avizienis paper that is prominent in the 
Official Action is the discussion of the DEDIX — the "Design 
Diversity Experiment " . This experimental all-software system 
(i. e. the DEDIX) was never an operational commercial software- 
controlled product like Best, never meant to operate automatical- 
ly unattended for long periods like Best. 

Rather the DEDIX, as plainly described in the cited paper, 
was an all-software experiment . It was not fully automatic, but 
rather was intended for closely supervised operation — starting, 
briefly running and then stopping again, in fits and starts, by 
multiple experimenters in academic labs around the world. 

See, for example, the paragraph bridging pages 1498 and 1499 
in the cited 1985 paper. It is there pointed out that the basic 
character of the experiment (the DEDIX) was to be stoppable, 
debrief able, injectable with new data, and even replayable , in a 
debugging mode? This exercise was all to facilitate the academ- 
ic, experimental objectives of learning what problems surface in 
trying to compare versions" of fault-tolerant software. 

Actually it is a conceptual horror to think of somehow "com- 
bining" features from the Avizienis paper with features from 
Best. In real-world academic terms and operational -equipment 
terms, it has almost no meaning. 

In the patent world, which after all is supposed to mirror 
the real world in some fashion, this combination can only be 
called improper. The Applicant therefore requests again, but now 
for this second reason very unlike the above-detailed first rea- 
son, that all these rejections be withdrawn. 

Failure of underlying § 102 rejections — Third, of the 38 claims 
rejected under § 103, more than half depend from claims taken up 
in the preceding section that deals with anticipation rejections 
under § 102. Those more-than-half are at least the twenty-two 
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claims listed here: 2, 3, 10, 12, 18, 22 through 24, 41, 46, 49, 
70, 75, 52, 56 through 61, 64, 78 and 80. 

The Applicant respectfully submits that almost all of these 
twenty- two claims are patentable by virtue of the same reasons 
presented above for failure of the § 102 rejections. That is, in 
almost all cases the basic positions espoused in the Official 
Action for the § 102 rejections are shown to be in error or inap- 
posite; and these same errors are repeated in the § 103 context 
— thus equally undermining the § 103 rejections. 

To the extent that the errors are not repeated expressly, 
nevertheless the dependent claims are by definition narrower than 
their parent claims — which have now been seen to survive § 102 . 
The narrower dependent claims are therefore patentable too. 

Supplemental analysis of § 103-rejected claims noted above — Fourth, 
below the Applicant presents claim-specific responses particular- 
ly to four claims or claim groups that stand rejected but are not 
fully discussed above. 

(1) Claims 2 and 50, 51, 56 through 61, and 71 through 75 — Claim 
2 recites that the apparatus (emphasis added) : 

"comprises means for automatically responding to the at 
least one error signal by generating the at least one 
recovery signal for guarding all such system against 
failure " . 

It is said in the Official Action, in analyzing claim 2, that the 
DEDIX experiment — as described in the 1985 Avizienis paper — 
satisfied those recitations. The Action also goes on (emphasis 
added) : 

"page 1498 [of Avizienis] discloses . . . local and glo- 
bal executives . . . providing commands to the version 
which prevent failure " . 
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With respect, both these statements are factually in error. It 
was not the function of the experiment (the DEDIX) to prevent 
failure, and it did not do so. 

Rather, the DEDIX experiment facilitated monitoring and 
studying failure. In the context of the experiment (the DEDIX), 
truly preventing failure would have left no failure to study, and 
thus would have been counterproductive ! 

Thus for example on the cited page 1498, in the paragraph 
bridging the two columns, the 1985 paper says (italics in origi- 
nal, underscoring added) : 

"The local executive will first try to recover locally 
before it either reports the problem . . . or, if it is 
considered as fatal to the site , closes down the site. 
Three classes of exceptions can occur. Functional ex- 
ceptions are specified .... Among them are . . . 
the case when a communication link is disconnected / and 
the case when a cc-vector is completely missing . For 
these exceptions, the local executive will attempt to 
keep the site active , possibly terminating the local 
version, while keeping the input/output operating . " 

The underscored words show that the local executive "reports" 
failure — to its human operators. The reports aren't "guarding 
against . . . failure". It is an academic study procedure only. 

Please notice the phrase "fatal to the site ". That does not 
mean "fatal to obtaining data". It means, e. g. , that the site 
may burn down or cause bodily harm. 

Likewise if a communication link is "disconnected" or a 
checkpoint vector "is completely missing", obviously the system 
must not have been "guarding against . . . failure". These 
failures are extremely serious, 1. e. "fatal" — and in any true 
failure-guarding mode they must be prevented or the apparatus 
terminated. 
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The conclusion is plain that the DEDIX did not prevent fai- 
lure, and did not satisfy the language of claim 2. Some additio- 
nal discussion may clarify what it actually did do. It performed 
these three kinds of tasks, none for purposes of guarding against 
failure: 

First, after such fatal failures the DEDIX tried to keep the 
site running! — though "possibly terminating the local version" 
but "keeping the input/output operating." In any kind of opera- 
tional system there is no point in keeping a site — or its "in- 
put/output" — running in the face of such catastrophic failures. 
Thus the DEDIX was for providing debuggability of failure, for 
academic analysis, not for preventing failure. 

As to a second kind of task, the very page cited in the Of- 
ficial Action goes on (italics in original, underscoring added) : 

" Implementation exceptions are dependent on the specific 
computer system, language, and implementation technique 
chosen. . . . Other examples are all the exceptions 
defined in DEDIX, such as signaling when a function is 
called with an invalid parameter or when an inconsis- 
tent state exists . Most of those exceptions will force 
an orderly closedown of a site in order to be able to 
provide data for analysis . 

Here it is stated expressly that the DEDIX provides "signal- 
ing" — to its human handlers, obviously — when some disaster 
has occurred. Such an event ordinarily will and should bring a 
computing system absolutely to its knees: an "invalid parameter" 
or an "inconsistent state". 

Yet the DEDIX instead forces "orderly closedown". It does 
so for an explicitly stated reason: "in order to provide data 
for analysis". 
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This reason for operating procedure of the DEDIX diverges 
abruptly from the claim-2 limitation "guarding against . . . fai- 
lure" . 

As to a third kind of task, here is yet another excerpt from 
the same passage (italics in original, underscoring added) : 

"Finally there are exceptions generated by the local 
version. The local version program may include provi- 
sions for exception handling and some of the exceptions 
may not be recoverable within the version. These ex- 
ceptions are sent to the local executive which will 
terminate the local version while keeping the site 
alive . " 

Once again, the experiment was "keeping the site alive" — but 
terminating the local version. Why? Because that site was, per- 
haps, someone's lab computer in, say for instance, New Zealand. 

Yes, the UCLA experiment had to be stopped because it had 
come to some sort of stymie and couldn' t run anymore until the 
postdoc came into the NZ lab in the morning to figure out what 
had happened. It would wreak havoc, however, to shut down that 
person's independent data crunching, on some completely different 
academic project, that was supposed to run all night and indeed 
maybe all month. 

The conclusion, again, is that the DEDIX did many things but 
did not guard against failure. Therefore the Avizienis '85 paper 
combined with Best can't render obvious the invention of claim 2. 

The proposed combination of references furthermore fails to 
satisfy the claim-2 recitations that the invention "receive [s] at 
least one error signal generated by such system in event of in- 
cipient such failure" and provides "at least one recovery signal 
to such system". The Avizienis paper describes almost exactly 
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the opposite of this recitation — as will be explained more 
fully in the later discussion of claim 12. 

Finally as to claim 2, it is also said at the bottom of page 
15 of the Official Action that it would have been obvious to one 
of ordinary skill (emphasis added) : 

"to implement the fault tolerant portions of the . . . 
DEDIX . . . with the hardware fault locating and han- 
dling system of Best, thereby creating a stronger 
N-version software system . " 

As to this additional purported justification for the rejection, 
the Applicant respectfully traverses, for yet another group of 
three independent reasons : 

First and most important, the hypothetical hybrid described 
in the Action fails to come up to the claimed invention . Neither 
claim 2 nor any other claim, through at least claim 11, is a 
"software system" as posited in the Official Action. Once again, 
these claims all recite that the invention has "substantially no 
software" . 

Second, the Applicant submits that no such "stronger" system 
could result from substituting Best's hardware — with its own 
required associated software — for the same functions already 
present in the DEDIX. The Best hardware would have to be added 
into the minicomputers running the DEDIX, hooked up through some 
ports in these computers, and then Best's control software would 
have to be integrated into the DEDIX software. 

After all that, there is no reason to suppose the resulting 
hybrid would be in any way better than the original DEDIX. Con- 
sequently there is absolutely no motivation for the proposed 
combination . 
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Third, the Applicant submits that it would not even occur to 
an ordinarily skilled person, looking at the two cited references^ 
to think about combining them. They just have an "apples and or- 
anges" quality — x. e. , mutually irrelevant. 

Thus there is no proper basis for reading claim 2 on the 
DEDIX research described in the Avizienis 1985 paper. The same 
is true for all the other "failure guarding" claims in this case. 

Most of this analysis applies in particular to claim 50 . 
The Applicant therefore respectfully submits that the cited com- 
bination of references does not come up to the invention of claim 
50. Nevertheless in the interest of moving this case forward to- 
ward allowance the Applicant has amended claim 50 by incorporat- 
ing the limitation of former claim 70 (now canceled) — namely, 
that the invention guards the entire computing system against 
failure . 

The Applicant therefore respectfully asks that the rejec- 
tions of claims 2 and 50 — and the several dependent claims of 
claim 50 — now be withdrawn. The dependents are 51, 56 through 
61, and 71 through 75 , all of which also add additional distin- 
guishing limitations discussed earlier. 

(2) Claims 2, 12, 18, 24; 33 through 38; 41, 54, 61, 64 through 
69, and 80 — All these twenty claims recite that the protected 
computing system has a subsystem that generates a response to 
failure. The protecting invention sees that response, analyzes 
the situation and returns a corrective signal that guards against 
overall system failure. 

Some of these claims, particularly claim 33 ff., also recite 
that the computing system has another subsystem which receives 
recovery commands returned from the invention. In this event the 
invention "interposes" analysis between the two subsystems. 
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In the Official Action as to several of these claims it is 
said that Avizienis ' 85 correspondingly teaches (emphasis added) : 

"a computing system . . . that has at least one subsys- 
tem for generating a response to failure (page 1498 
describes the Version layer reporting errors and re- 
ceiving decisions results) . 

Applicant respectfully traverses, because this description is 
backward. In the DEDIX, the version layer did not report errors. 

Rather , as described by Avizienis, it received error reports 
from the DEDIX, with corrected data to reinject into the "cc" 
("cross-check") points. Then the experiment could go on. 

Please notice also that such revision and reinsertion of the 
data, with restarting of the process, are wholly alien to the 
concept of claim 1 and thus claim 2 (and claim 3) . These claims 
recite that the invention deters failure of the computing system 
and guards that system from failure, whereas the Avizienis paper 
describes instead exactly the opposite: the DEDIX first allowed 
the computing system to fail, and only then stepped in to tell it 
what it should have done. 

Essentially this same analysis is true for all these twenty 
claims — and also for claims such as 49 and 73 . These recite in 
a more-abbreviated way that the invention receives error messages 
from the computing system and issues recovery commands. 

It is true as well for claim 81 and its dependent claims 82 
and 83. Claim 81 further recites that the apparatus is an infra- 
structure, which does not read on Best's peer circuitry or on the 
DEDIX experimental operating environment staffed by people. The 
Applicant therefore respectfully asks that the rejections of all 
these claims be withdrawn. 
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(3) Claim 3 — In the Official Action it is said that the 
DEDIX is generic as recited in this claim, and that this generic 
property can be carried through to a hardware system taught by 
Best. For these three reasons, Applicant traverses: 

First, neither Best nor Avizienis teaches an all-hardware 
system as recited in claim 1; and claim 3 depends from claim 1. 
Hence the claim is not met. 

Second, neither Best nor the DEDIX is an infrastructure. As 
noted earlier, Best is only peer circuitry, while the DEDIX is an 
experimental operating environment with human participants . 

Third, neither of the references satisfies the claim-3 
recitation that the invention (emphasis added) "can accommodate 
any such system that can issue an error message and handle a 
recovery command". Rather, both references describe system re- 
quirements that are highly specific to the computing systems 
hosted: 

The control software of Best's system of course was entirely 
custom made to operate his hardware. For the DEDIX, application 
programs had to be explicitly and specially written to provide 
the "cross-check" points mentioned earlier. 

This analysis (except for the "all hardware" factor men- 
tioned first) applies equally well to claims 23, 35, 46, 55 
through 59, 61, 69, 74, 75 and 78 . In addition the discussion of 
infrastructure applies to claim 81 , and its dependents — claims 
82 and 83 . The Applicant therefore respectfully requests with- 
drawal of the rejections of all these seventeen claims. 

(4) Claim 10 — This claim too contains the all-hardware 
limitation mentioned above, and this alone would be sufficient to 
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distinguish the cited combination. Furthermore this claim 
recites that the apparatus (emphasis added) : 

"is particularly for use with a computing system that has 
plural processors; and wherein: 

"the circuits comprise portions for identifying fai- 
lure of any of such processors and correcting for iden- 
tified such failure." 

In the Official Action as to this claim 10 it is said that (em- 
phasis added) : 

"Best does disclose 'dissimilar computing elements 
- • but not specifically processors ; Avizienis does 
disclose processor indirectly by monitoring for proces- 
sor errors .... Avizienis handles processor faults, 
while Best simply handles any fault coming down the 
communication channel"" 

This excerpt appears intended to imply that the combination of 
references makes obvious the claimed identifying of processor 
failure. Applicant traverses, as both references are irrelevant: 

The quoted excerpt from the Action appears to concede that 
Best does not teach use of plural processors — and as shown ear- 
lier his system has an associated host computer that runs control 
software. Thus it is not a "hardware network . . . having sub- 
stantially no software". 

Avizienis describes the DEDIX, which does have multiple pro- 
cessors; but they, too, all run software. Thus both references 
are irrelevant to claim 10. 

The Applicant therefore respectfully asks that the rejection 
of claim 10 be withdrawn. The immediately foregoing comments ap- 
ply as well to claims 22, 52 and 55 ; and the Applicant also asks 
that rejection of these three claims, too, be withdrawn. 
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Conclusion 



In view of the foregoing amendment and remarks, the Appli- 
cant respectfully requests reconsideration and allowance of all 
claims now standing in this case. In addition, noting . the ex- 
tremely high cost of continuing prosecution of this application 
— not only to the Applicant but to the Government as well — it 
is earnestly requested that, should there appear any obstacle to 
allowance of the claims herein, the Examiner telephone the under- 
signed attorney to try to resolve the obstacle. 



Respectf ullyvsubmitted, 




PETER I.J'lffFPMAN 
Registra^cm No. 22,835 
Attorney for the Applicant 



Peter I. Lippman, patent lawyer 

(licensed to practice California law only) 

17900 Mockingbird Drive 

Reno NV 89506 TELEPHONE : 

May 15, 2006 775/677-8822 
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